Read the press release the way the agency wants you to read it and the headline number is impressive. More than $15 million returned to the U.S. Treasury through the SBA Office of Inspector General's fraud recovery efforts. Inspector General William W. Kirk, sworn in earlier this year, framed it as the cleanest demonstration yet of an OIG that is finally moving on the fraud accumulated through the pandemic disbursement window. Read the same press release the way the receipts read it, and a different sentence comes into focus. The $15 million did not come from any of the people who filed the fraudulent loan applications. The $15 million came from two financial institutions. The money came from the banks that processed the applications. The fraudsters, by and large, still have the money.
This is not a quibble. This is the entire recovery pattern, in one quarter, in one announcement. The SBA's anti-fraud apparatus, once a fraudulent loan has been disbursed, has roughly two recovery levers. Lever one, criminal prosecution and restitution against the individual borrower. That lever, in the aggregate, recovers cents on the dollar because the borrowers are insolvent or hidden or both. Lever two, civil enforcement against the lender that processed the loan. That lever, when it works, can claw back actual money because banks have actual balance sheets. The OIG's recovery numbers are dominated, quarter after quarter, by lever two. The press releases use the word "facilitated" because the strict accounting word is "settled with the bank."
The Mechanics, As Plainly As They Can Be Stated
A PPP or EIDL application gets filed. The application contains material misstatements. The lender that processed the application is supposed to perform a defined set of verification steps before originating the loan. The federal program, in practice, gave the lender a guarantee that significantly reduced the lender's incentive to scrutinize the application. The lender accepted the application. The SBA approved the loan. The funds were disbursed. The fraud is later discovered, sometimes through the OIG's analytics, sometimes through a separate criminal investigation, sometimes through a borrower's later civil litigation.
Now the question becomes, who pays. The fraudster has spent the money. The borrower entity, in many cases, was never solvent and is now formally dissolved. The bank, however, still exists. The bank still has assets. The bank, importantly, has documents that show whether or not it followed the verification protocols the program required. If the OIG can show, in a civil enforcement posture, that the lender skipped or bungled the verification step the program required, the lender is on the hook for at least a portion of the loan amount. That is where the OIG's recovery dollars come from. The bank settles. The OIG announces the settlement as a recovery. The press release goes up. The headline reads "SBA returns $15 million to Treasury." The fraudster, in this story, is in many cases not even named.
The agency that approved the loan is being reimbursed by the bank that processed the loan, while the person who filed the fraudulent loan, in most cases, keeps the proceeds. If you reverse-engineered an institutional design from this outcome, you would conclude that the program was structured precisely to produce this outcome. You would not be wrong.
Why This Pattern Persists
The structural reason the recovery has to come from the banks is that the banks are the only solvent institutions in the chain after the disbursement happens. The fraudsters, on average, used pandemic loan proceeds for non-payroll consumption. Cars, houses, gambling losses, retail spending, transfers offshore. Treasury offset, the formal lever the federal government uses to claw back debts owed to the United States, can intercept tax refunds and certain other federal payments owed to the debtor. It cannot recover spent money. It cannot recover funds in offshore accounts. It cannot recover the fraction of the disbursement that went to a now-bankrupt borrower entity that has no remaining assets. So the recovery looks like the banks paying for the agency's intake failure.
There is a more cynical reason, too, and it is worth saying out loud. Bank settlements are easier to publicize than individual prosecutions. A single $15 million settlement between the OIG and a financial institution lands as a clean number in a clean press release. Forty individual restitution orders against forty borrowers, summing to $1.5 million in actually-collected dollars, is a forty-times-larger amount of paperwork for a tenth of the headline. The OIG's incentive structure rewards the bank-settlement approach. The numbers are bigger. The cycles are shorter. The optics are cleaner. The fraudsters, in this calculus, are an afterthought.
William Kirk's First Quarter, In Plain Numbers
- Inspector General William W. Kirk: sworn in earlier this year as part of a wave of new SBA leadership.
- Recovery announced from two financial institutions: more than $15 million returned to the U.S. Treasury.
- Number of individual fraudsters criminally charged in connection with the recovered funds, on the public record so far: a fraction of one percent of the underlying loan count.
- SBA OIG fraud-flag dataset size, as referenced in recent contracting language: thousands of loans across multiple program windows.
- Time elapsed between original disbursement and the announced recovery: roughly four to five years for the bulk of the underlying loans.
The Honest Translation Of The Press Release
If the OIG's announcement was rewritten for an audience that did not need to be flattered, it would read approximately like this. "The SBA OIG, working with civil enforcement counterparts at the Department of Justice and the relevant U.S. Attorneys' offices, settled with two financial institutions for a combined sum exceeding $15 million. The settlements relate to PPP and EIDL applications that the institutions originated under the federal program in 2020 and 2021 that, on later review, contained material misstatements the institutions did not adequately verify. The settlements do not include any of the underlying borrower defendants, most of whom are not in a position to provide meaningful restitution. The recovered funds will be returned to the U.S. Treasury. The structural failure that allowed the disbursements in the first place has not, by these settlements, been remediated."
That sentence is approximately twenty times longer than the headline. It is approximately twenty times more accurate. It is also, predictably, not the sentence the agency chose to lead with.
What "Returned To Treasury" Actually Means For The Public
The phrase "returned to Treasury" makes the recovery sound like a clean accounting reversal. The reality is messier. Returned-to-Treasury dollars do not flow back to the small businesses that did not receive PPP funding because the program was depleted by fraudulent applicants. They do not flow back to taxpayers in any direct sense. They go into the Treasury general fund, which finances federal operations broadly. So when the OIG says it returned $15 million to Treasury, the practical effect is that the federal government's general financing position is $15 million less negative than it would have been. That is real. It is also not the same thing as making the program's victims whole.
The program's victims, in case anybody has forgotten, were the small businesses that filed legitimate applications and either did not receive funding because the windows closed before their applications were processed, or received funding that was later subject to clawback ambiguity because the program's documentation requirements shifted multiple times. Those small businesses are not the recipients of the recovered $15 million. They are, by program design, third parties to the recovery accounting. The fraudsters drained the well. The honest applicants did not get to drink. The OIG is now charging the well operator. The well operator pays the OIG. The OIG returns the money to the Treasury. Nobody who was actually harmed by the program's intake failure is part of this loop.
The Bank Side Of This Has A Defense, And It Is Not A Bad One
To be fair to the financial institutions on the receiving end of the OIG's enforcement attention. The pandemic loan window was, on the government's own contemporaneous instructions, designed for speed. The federal guidance to lenders explicitly relaxed the documentation and verification standards that those lenders would have applied to a non-emergency loan product. Lender attestation, rather than independent verification, was the program's design choice. The lenders complied with the program's design choice. Several years later, the same federal apparatus is using civil enforcement tools to extract settlements from those same lenders for failing to meet a verification standard that the original federal guidance had relaxed.
That is a real defense. It is also, in the actual settlements that have been announced, partially conceded by the OIG in the form of percentage settlements that are well below the face value of the underlying disbursements. The banks pay something. The banks do not pay everything. The OIG announces the something as a recovery. The math, when fully laid out, says the federal government wrote loans through a program whose guidance reduced verification, then sued the lenders for not verifying enough, then settled for a haircut. The cyberpunk word for this loop is "rotation." Money rotates from agency to bank to agency, and at the end of the cycle, the only one not in the loop is the original fraudster.
What An Honest OIG Press Release Would Add
If the OIG wanted to be honest with the public about what its recovery numbers represent, the press releases would routinely include three additional pieces of information. First, the percentage of the underlying disbursement that was actually recovered, broken out by category. Second, the number of individual borrower defendants who were criminally charged in connection with the recovered loans, and the total restitution actually collected from those individuals. Third, a candid acknowledgement of the structural reality that future emergency lending programs, if run on the same intake design, will produce the same fraud universe with the same lender-settlement recovery pattern. None of those three pieces of information would be flattering. None of them would change the broad arc of the announcement. All of them would help the reader understand what they are actually being told.
None of them are in the press release. The press release stops at the headline number. The headline number is the recovery the agency wants reported. The structural pattern is the part the agency does not want to discuss in any forum where the discussion can be repeated back to the agency in a future Senate hearing.
The Pattern, Restated For The Record
The agency approves the loans. The fraudsters keep the money. The banks pay the settlements. The OIG announces the settlements. The Treasury gets the recovery. The honest applicants do not get reimbursed. The agency issues a press release. The press release uses the word "integrity." The next emergency lending window opens, in some future crisis, on the same architecture. The same pattern produces the same outcome. The OIG, four years later, announces another set of recoveries from the next set of banks.
This is not a critique that requires anyone to dislike William Kirk or to disrespect the OIG's working investigators, who are, in many individual cases, extracting real settlements from genuinely culpable institutions. The critique is structural. The structural design produces the pattern. The pattern is what the receipts show, every quarter, every press release, every announcement. The $15 million recovered from two banks earlier this spring is one entry in a very long ledger. The ledger says the same thing every time. Read it once and you have read it forever. The agency wrote the checks. The agency is being reimbursed by the banks. The fraudsters, on the public record, kept the money. That is the program. That is the cleanup. That is, four years on, what we are now calling integrity.